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Abstract 

The on-orbit management of liquid hydrogen planned for 
the return to the moon will introduce new considerations not 
encountered in previous missions. This paper identifies critical 
liquid hydrogen sensing needs from the perspective of reliable 
on-orbit cryogenic fluid management, and contrasts the fun- 
damental differences in fluid and thermodynamic behavior for 
ground-based versus on-orbit conditions. Opportunities for 
advanced sensor development and implementation are 
explored in the context of critical Exploration Architecture 
operations such as on-orbit storage, docking, and trans-lunar 
injection bum. Key sensing needs relative to these operations 
are also examined, including: liquid/vapor detection, thermo- 
dynamic condition monitoring, mass gauging, and leak detec- 
tion. Finally, operational aspects of an integrated system 
health management approach are discussed to highlight the 
potential impact on mission success. 

Introduction 

The recent unveiling of NASA’s Exploration Architecture 
reveals a scenario that will mark a first in space operations: the 
extended storage and handling of large quantities of liquid 
hydrogen on-orbit. The closest precedent has been much 
shorter coast periods of Centaur upper stages for some mis- 
sions (e.g., 33 min for the Mars Reconnaissance Orbiter 
(ref. 1). The on-orbit management of liquid hydrogen planned 
for the return to the moon will introduce new and critical con- 
siderations not encountered in previous missions. 

Figure 1 provides a conceptual operations timeline for the 
earth-to-orbit phase of the mission (refs. 2 and 3). First, the 
Cargo Launch Vehicle (CaLV) delivers the Lunar Surface 
Access Module (LSAM) and the Earth Departure Stage (EDS) 
to low earth orbit (LEO). The Crew Exploration Vehicle 
(CEV) is delivered to LEO next on a separate Crew Launch 
Vehicle (CLV). Finally, the CEV, LSAM, and EDS rendez- 
vous on-orbit and begin the trans-lunar injection bum. 

The elapsed time between the CaLV lift-off and the dock- 
ing of the CEV, LSAM, and EDS could be from hours to days 
depending on a variety of factors including mission planning, 
pre-launch anomalies, and weather conditions. During this 
period the liquid hydrogen/liquid oxygen departure stage is 
subjected to a low-gravity orbital environment that poses 
unique challenges for liquid hydrogen system management. 


Similar low-gravity cryogenic fluid management challenges 
result from the operational need for a fueled CEV/SM (service 
module) to remain at the International Space Station (ISS) for 
periods up to six months, with the capability to leave the ISS 
within minutes (ref. 4). 

From a commercial space perspective, NASA Administra- 
tor Michael Griffin has consistently stated his interest in pro- 
moting private sector development of space transportation 
elements such as earth-orbiting fuel depots (ref. 5). These 
depots could replenish space vehicles bound to the moon or 
Mars with liquid hydrogen and other required propellants that 
typically make up half the weight of an earth-launched vehi- 
cle, thus substantially reducing launch costs. New liquid 
hydrogen sensor technologies will be necessary to enable or- 
bital depots, and will also likely find application in ground- 
based systems supporting the emerging hydrogen economy 
infrastructure. 

The objective of this paper is to identify critical liquid 
hydrogen sensing needs from the perspective of reliable 
on-orbit cryogenic fluid management. It is hoped that these 
identified needs will provide some insight into opportunities 
for advanced sensor development and implementation in sup- 
port of the Exploration Architecture, as well as emerging 
commercial applications. 

Liquid Hydrogen System Issues 

All ground-based liquid hydrogen systems are predicated 
on decades of experience in a normal gravity environment, 
resulting in well known and manageable conditions: 

Liquid/Vapor Distribution 

Liquid settles at bottom of the tank, and the gaseous ullage 
collects at the top, resulting in a well defined flat interface. 
This predictable distribution of liquid and vapor permits criti- 
cal operations such as liquid transfer from the tank bottom, 
gaseous venting from the tank top, active cooling by conden- 
sation of ullage vapor, and estimation of the liquid quantity via 
liquid level measurement. 

Thermal Stratification 

In general, the temperature distribution in both the liquid 
and vapor is horizontally stratified due to buoyancy forces. 
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degraded insulation performance is critical to minimizing loss 
of hydrogen from the tank. 

Leak detection 

Hydrogen leaks will quickly vaporize, warm, diffuse, and 
rise in an air environment due to buoyancy effects. This 
behavior allows placement of a minimum number of leak 
detectors in key locations. Reliable detection of hydrogen 
leaks is critical to both operational safety, and maintenance of 
hydrogen quantity. 

Most of these conditions are also relevant in the induced 
acceleration environment of a launch vehicle under thrust. 
On-orbit, however, none of the above conditions are valid. 
Instead, a new set of conditions exists that must be addressed 
by a combination of system design, operational procedures, 
and advanced sensors to insure mission success. Table 1 
summarizes the difference in key conditions for ground-based 
versus on-orbit liquid hydrogen systems. 


Figure 1. — Moon mission conceptual operations 
timeline (refs. 2 and 3). 


The liquid-vapor interface is at saturation temperature dic- 
tated by the tank vapor pressure, with the ullage being increas- 
ingly superheated as a function of distance above the interface. 
If the tank pressure is maintained constant (e.g., by controlled 
venting) all of the liquid below the interface is also at satura- 
tion temperature. If the tank is being pressurized, the bulk of 
the liquid is subcooled at distances below the interface. This 
thermal stratification behavior allows reliable operations such 
as long term storage and pressurized liquid expulsion. 

Heat Transfer 

Heat leak from the environment can be quantified for a 
cryogenic tank as a function of environment conditions and fill 
level. The dependency on fill level is primarily due to two 
factors: higher heat leak paths from the tank penetrations 
(generally located at the top of the tank), and higher heat 
transfer rate at portions of the tank wall in contact with the 
liquid. Once quantified, the predictable heat leak performance 
of a liquid hydrogen tank allows reliable storage management 
and good estimation of the amount of hydrogen lost to boiloff 
over any period of time. 

Insulation Integrity 

Insulation performance can be monitored by measurement 
of the vacuum level in the insulated vacuum jacket of the tank. 
Any physical damage to the outer surface of the tank, or leak- 
age from within the tank, will be immediately evident from a 
rise in vacuum jacket pressure. The timely indication of 


TABLE 1.— COMPARISON OF GROUND AND ORBITAL 
LIQUID HYDROGEN SYSTEMS 


Condition 

Ground-Based 

On-Orbit 

Liquid/vapor 

distribution 

Liquid at the bottom, 
vapor at the top; flat 
interface 

Various distributions 
possible; interface(s) 
defined by ullage bubble(s) 

Thermal strati- 
fication 

Horizontal stratification 
due to buoyancy; super- 
heated ullage region 

Stratification from walls 
inward by conduction 
only; saturated ullage 

Heat transfer 

Predictable heat leak as 
a function of liquid level 
and environment 

Heat leak dependent on 
multiple variables; can 
have liquid superheat 

Insulation 

integrity 

Can be monitored by 
vacuum jacket press. 

Requires more complex 
monitoring 

Leak detection 

Known leakage 
behavior 

Complex leak paths and 
plume characteristics 


Sensor Considerations 

Figure 2 illustrates some of the fundamental fluid behavior 
differences between a ground-based liquid hydrogen tank 
under normal gravity conditions and one in an orbital envi- 
ronment. These differences in fluid behavior, along with the 
other conditions summarized in Table I, point to the need for 
advanced sensing capabilities to insure reliable orbital 
operations. 

Key sensing needs include: liquid/vapor detection, thermo- 
dynamic condition monitoring, mass gauging, and leak detec- 
tion. In addition, several sensor system design drivers and 
desirable characteristics must be addressed such as: light- 
weight construction, low power draw, high reliability, multi- 
functional capabilities, and compatibility with integrated 
health system management configurations. 
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Liquid/Vapor Distribution 


Perhaps the most critical sensing need for extended man- 
agement of liquid hydrogen on-orbit is the capability to detect 
the location of liquid and vapor within the tank. This capabil- 
ity is vital to key low-gravity operations such as venting for 
pressure relief and liquid transfer. For example, without reli- 
able knowledge of the liquid/vapor distribution, significant 
quantities of liquid hydrogen can be inadvertently vented. 
Other concerns include injection of pressurant directly into the 
liquid resulting in insufficient pressurization; and/or ingestion 
of large quantities of vapor during engine firings. Any of these 
scenarios could potentially result in loss of mission. 

Some generic sensing approaches to address this issue 
include: Combinations of operational procedures, liquid acqui- 
sition devices, and preferentially placed sensors; An array of 
point sensors of sufficient quantity and placement; Optical or 
other techniques that rely on differences in vapor and liquid 
refraction, transmission, reflection, etc. 


Thermodynamic Condition Monitoring 

Information on the thermodynamic condition of a cryogen, 
conventionally measured by temperature and pressure, is vital 
for extended on-orbit storage and cryogenic fluid manage- 
ment. Without detailed knowledge of thermodynamic condi- 
tions in all regions of a cryogenic tank, the behavior of the 
system under a variety of operations cannot be predicted. 
Some critical system behaviors and parameters related to 
thermodynamic conditions include: pressure control (ref. 7), 
ullage collapse (ref. 8), engine feed conditions, active cooling, 
and explosive boiling (ref. 9). 

A single sensor (properly located) is generally sufficient to 
characterize the pressure for all cryogenic contents within a 
closed tank. However, multiple temperature sensing locations 
are needed due to the uncertain temperature distribution 
caused by the lack of buoyancy forces in low gravity. An array 
of temperature sensors, or innovative techniques for measure- 
ment of temperature dependent fluid properties, would allow 
inference of thermodynamic conditioning. 

Mass Gauging 

Accurate prediction of the quantity of liquid hydrogen 
remaining in a propellant tank is critical for mission opera- 
tions. Traditional ground-based mass gauging techniques use 
point sensors or a capacitance probe to detect or infer the 
liquid level. Normal gravity insures that the interface defined 
by the liquid level separates the ullage gas in the upper region 
of the tank, and the liquid region below. The mass of liquid 
hydrogen in the tank can then be readily estimated with 
knowledge of the average liquid density and tank geometry. 

In a low gravity environment, mass gauging techniques 
cannot assume a priori knowledge of the liquid-vapor 


Superheated Vapor 

Saturated Vapor 
Saturated Liquid 


Subcooled 

Liquid 





Figure 2. — Fluid behavior and thermodynamic 
conditions of ground-based (top) versus 
on-orbit (bottom) liquid hydrogen tanks. 

distribution nor the geometry of the interface(s). Successful 
mass gauging methods must integrate data throughout the 
entire tank volume to arrive at an acceptable estimation of fill 
level. Proposed methods include: arrays of point sensors, 
optical/RF/microwave techniques, and acoustic/pressure wave 
methods. 

Leak Detection 

The potential for hydrogen leaks pose contamination, 
safety, and propellant loss risks. The characteristics of the 
plume formed by a hydrogen leak in space will vary based on 
a variety of vehicle, environmental, and leak source condi- 
tions. This variability complicates the detection of hydrogen 
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leaks both on-orbit and in lunar transit. Possible methods to 
detect leaks may depend on optical/visual monitoring, point 
sensors in key locations, and/or internal tank monitoring 
(e.g., mass gauging). 

Summary Considerations 

Table 2 summarizes primary liquid hydrogen system 
parameters that need to be addressed. Also included are criti- 
cal operations supported by each parameter, and some of the 
key issues that need to be resolved to implement a sensor 
based solution. Note that in general, it would be highly desir- 
able to have more than one parameter measured or inferred by 
the same multifunctional sensor array (e.g., liquid/vapor detec- 
tion, temperature, and mass gauging). 


TABLE 2.— PRIMARY PARAMETERS, SUPPORTED 
OPERATIONS, AND KEY ISSUES 


Parameter 

Operations 

Issues 

Liquid/vapor 

detection 

Venting, pressuriza- 
tion, engine feed 

Spatial resolution, 
response time 

Thermodynamic 

condition 

Storage, engine 
feed 

Spatial resolution, 
accuracy 

Mass gauging 

Engine feed 

Accuracy, uncertainty 

Leak detection 

Storage, vehicle 
manuevers 

Source identification, 
false negatives 


Spatial resolution is a key issue for both liquid/vapor detec- 
tion and thermodynamic condition monitoring. Because of the 
complex liquid and temperature distributions possible in a 
low-gravity environment, complete data throughout the tank 
internal volume is necessary. For liquid/vapor detection, fast 
response time (e.g., milliseconds) is also critical to capture 
fluid movements during periods of induced acceleration. 

Since temperatures in the fluid will change in times scales 
of seconds to minutes, sensor accuracy is more critical than 
response time for thermodynamic condition monitoring. 
Changes in the liquid temperature of one degree Centigrade or 
less can have significant impact on the thermodynamic behav- 
ior of the system. 

Key issues for mass gauging include both accuracy and 
uncertainty. An accurate estimate of liquid mass is critical to 
assessing whether sufficient propellant remains to support 
planned mission operations. Additionally, many currently pro- 
posed methods rely on fluid distribution assumptions that 
introduce potentially high uncertainty in the estimate of liquid 
mass. 

For leak detection, the ability to pinpoint the source of the 
leak is critical in identifying appropriate corrective action. 
Also, the avoidance of “false negatives” (i.e., a leak is not 
detected by the sensor system) is paramount. 


Integrated System Health Management 

Key to maximizing the utility of any liquid hydrogen 
system sensor for space exploration is compatibility with an 


integrated system health management (ISHM) architecture. A 
liquid hydrogen system ISHM would enable automated real- 
time monitoring of critical system parameters, and ideally take 
corrective action when necessary to insure proper system 
operation. In the event that human intervention is necessary, 
the ISHM could also provide diagnostic data and procedural 
recommendations . 

As a conceptual example of how a liquid hydrogen ISHM 
system might function, consider the Earth Departure Stage 
(EDS) of the Cargo Launch Vehicle (CaLV) as illustrated in 
figure 3 (ref. 10). Assume that the EDS liquid hydrogen tank 
is populated with an array of sensors that provide the neces- 
sary data to monitor liquid/vapor distribution, thermodynamic 
conditions, leakage, and liquid mass. Further assume that the 
EDS has been delivered to low earth orbit awaiting docking 
with the CEV. Below is a hypothetical mission scenario of 
how an ISHM system could operate under these conditions. 

On-Orbit Storage 

Orbital heat leak into the EDS hydrogen tank is absorbed 
primarily by the liquid, raising the average liquid temperature. 
Information on the thermal stratification (i.e., temperature 
distribution) of the liquid from the sensor array indicates that 
some of the liquid is subcooled relative to the tank pressure. 
Based on this data, the ISHM reduces tank pressure as needed 



Figure 3. — Cargo launch vehicle general configuration and liquid 
hydrogen/liquid oxygen earth departure stage (ref. 10). 
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by energizing a fluid mixer in the hydrogen tank to bring the 
contents into equilibrium. 

Later in the mission, the sensor array detects superheated 
liquid on the sun-facing side of the tank. This condition can 
lead to explosive boiling and potential over-pressure of the 
tank. To mitigate this risk, the ISHM again energizes a mixer 
to eliminate the superheat. 

Eventually, there is insufficient subcooling in the liquid to 
lower pressure by mixing. If a cryocooler has been integrated 
into the EDS hydrogen system, the ISHM begins active cool- 
ing of the tank and mixes the contents as necessary to lower 
pressure. If no active cooling capability exists, settling thrust- 
ers are fired by the ISHM to position the ullage gas over the 
vent port. Once the liquid/vapor detection function confirms 
the location of the ullage, the ISHM vents gas until the desired 
pressure is reached, and the thrusters are then deactivated. 

Docking 

Prior to docking with the CEV, the ISHM assesses the 
condition of the EDS liquid hydrogen system, predicts the 
effects the docking maneuver will have on the system, and 
prepares accordingly. Cryocooler and mixer operations are 
shut down at the earliest possible time to conserve power since 
the induced acceleration of the docking will provide mixing, 
and potential ullage positioning, for final pressure control 
adjustment. 

An external leak detection sensor indicates a minute quan- 
tity of hydrogen is still coming from the tank following final 
venting for pressure control adjustment. The ISHM correlates 
this data with a colder than anticipated temperature down 
stream of the vent valve, and issues a command to cycle the 
valve. Once the ISHM has confirmed that this action has cor- 
rected the leakage problem, the docking sequence is initiated. 

After docking, in preparation for pressurization of the tank 
for engine feed to begin trans-lunar injection, optimum tank 
pressure is reached by the ISHM based on all the parameter 
data supplied by the sensor array. Mass gauging confirms that 
propellant remains within acceptable margins to meet mission 
objectives. 

Trans-Lunar Injection 

As pressurization of the hydrogen tank begins prior to 
engine firing, the ISHM collects data on the internal tank 
conditions. The degree of subcooling of the bulk liquid is care- 
fully monitored, and modified if necessary by mixing or other 
techniques to mitigate ullage collapse. Ullage collapse occurs 
when subcooled liquid comes in sudden contact with the liq- 
uid-vapor interface causing a rapid pressure drop to the satura- 
tion pressure value corresponding to the liquid temperature. 
During pressurized or pressure assisted expulsion, ullage col- 
lapse can cause disruption of propellant flow to the engines. 

As the engines are fired, the temperature of the liquid leav- 
ing the hydrogen tank is monitored to insure the inlet tempera- 
ture to the engines is within design range. The ISHM also 


senses temperatures throughout the bulk liquid (i.e., detailed 
temperature distribution) and takes any preemptive action nec- 
essary to insure the outlet temperature remains acceptable 
throughout the expulsion process. The mass gauging function 
insures that propellant usage is following the mission profile, 
otherwise the ISHM takes action to either correct the situation 
or provide critical data for human intervention decisions. 

Concluding Remarks 

The need for new sensor systems to enable cryogenic fluid 
management for the NASA’s Exploration Architecture has 
been advocated, with particular emphasis on the orbital issues 
associated with the EDS liquid hydrogen tank. Sensor systems 
used for ground-based liquid hydrogen tanks are inadequate 
for extended low gravity cryogen management due to the fun- 
damental differences in fluid and thermodynamic behavior. 

Key required capabilities include: liquid/vapor detection, 
thermodynamic condition monitoring, fill level/mass gauging, 
and leak detection. Furthermore, the integration of these capa- 
bilities into an Integrated Health Management System can 
significantly reduce risk and increase the likelihood of mission 
success during critical operations such as on-orbit storage, 
docking, and trans-lunar injection. 

A final issue for consideration are the trade-offs associated 
with alternative solutions that are not sensor-based. From a 
system integration standpoint, a new sensor system must dem- 
onstrate significant advantages over other design and opera- 
tional approaches in order to be selected for implementation. 
Table 3 summarizes potential alternative methods for address- 
ing the key on-orbit liquid hydrogen management issues raised 
in this paper, along with advantages and disadvantages of each 
approach. It is likely that an optimum solution will incorporate 
a hybrid approach that leverages the inherent advantages of 
integrated sensors, overall system design, and modified opera- 
tional scenarios. 


TABLE 3 . — ALTERNATIVES TO SENSOR-BASED SOLUTIONS 


Issue 

Alternatives 

Advantages 

Disadvantages 

Liquid/vapor 

distribution 

Extensive use of 
settling thrusters 

Predictable 

liquid/vapor 

distribution 

Increased pro- 
pellant mass for 
thrusters 

Thermodyna- 
mic conditions 

Extensive use of 
mixer and/or 
fluid circulation 

Maintains 
equilibrium 
conditions 
throughout 
the tank 

Increased 
power, mass, 
and complexity 

Mass gauging 

Active cooling; 
no venting 

Constant mass 
until engine 
fire 

Power and mass 
req’s; no real- 
time fuel gauge 

Leak detection 

Monitor static 
tank pressure 

Simple imple- 
mentation 

Some leaks may 
go undetected 

Issue 

Alternatives 

Advantages 

Disadvantages 
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